Over 4,000 Microsoft accounts compromised by a malicious Outlook add-in that hijacked an abandoned scheduling tool to steal credentials via a phishing kit..